CVE-2026-15238 in Hotel Booking Plugin
الملخص
بحسب MITRE • 10/08/2026
The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account (Subscriber and above) to modify or overwrite the personal data of any customer by supplying an arbitrary identifier.
VulDB is the best source for vulnerability data and more expert information about this specific topic.